By Patrick Turcotte, COO, Docutrax. Last reviewed: 27 October 2026.

A certificate of insurance stays relevant for as long as a claim can still be brought against the work it relates to. For construction, that period is set by the statute of repose in the project's state, measured from a completion event, and across states it runs from four years to twelve. A calendar built on policy renewals destroys certificates long before any of those clocks run out.

Below is where the periods sit by state, what extends them, how to turn them into a retention number you can defend, and what belongs in the file when someone goes looking in year eight.

Why a certificate matters in year eight

A deck builder carried an occurrence-based policy with products and completed operations coverage for all ten years he was in business, and cancelled it on 1 July 2018. A deck he had built that May collapsed on 31 August, injuring a customer, and his insurer had no obligation to defend. Craig Stanovich sets the case out in IRMI. Ten years of continuous coverage reached none of it.

That is the occurrence trigger. Under the standard ISO commercial general liability form, Coverage A applies only if the injury or damage "occurs during the policy period." Claims from finished work fall into the products and completed operations hazard, so the policy that answers one is the policy in force when the damage happens, which is not necessarily the policy in force when the work was done. For whoever holds the certificates, the coverage that responds may sit in any of several policy years after closeout.

Which means the certificate you need in year eight may not be the one from the year the work was done. A certificate collected during construction identifies the policy in force then, and that policy responds only if the damage is found to have occurred in that period. States decide that timing differently. Identifying the later policies depends on the contract having required completed operations coverage to be maintained after completion, and on certificates being collected for those years too.

There is a reason not to leave those records with anyone else. Where a policy cannot be found, "a policyholder then has the burden to prove both the policy's existence and its critical contents," as Douglas Talley describes in IRMI. Mergers, restructurings and scheduled destruction are exactly how those records go missing, and the party holding the burden is the one trying to collect.

Sources: Stanovich, The hazards of products and completed operations, IRMI · CG 00 01 coverage form · Talley, Judicial reconstruction of missing insurance policies, IRMI

Why renewal-based retention fails, and repose runs from the work

Open most records retention schedules and a certificate looks like an administrative document. You collected it, the policy expired, a new certificate replaced it, and the old one is clutter.

That holds for relationships with no tail: a janitorial vendor, a catering contract, an event. Once the service ends and the limitations period on anything that happened runs out, the exposure is gone. Construction is different, because the exposure outlives the work. A roof leak, a failed balcony or a water intrusion claim can surface years after closeout, and when one does you need to know which subcontractor did the work, which carrier insured them at the relevant time, and under what policy number.

So the bound you need is not a renewal date but a legal one, and two different legal clocks could supply it. The U.S. Supreme Court drew the distinction in CTS Corp. v. Waldburger, 573 U.S. 1 (2014). A statute of limitations runs from when a claim accrues, meaning when the harm occurred or was discovered. A statute of repose runs from the defendant's own conduct, "measured not from the date on which the claim accrues but instead from the date of the last culpable act or omission of the defendant." The Court also noted that "Statutes of limitations, but not statutes of repose, are subject to equitable tolling," so repose is built to be a firm outer limit.

That is why repose is the anchor. You cannot schedule retention against a limitations period, because nobody knows when a latent defect will be discovered. You can schedule it against a repose period, because its start date is known the day the project closes.

Sources: CTS Corp. v. Waldburger, 573 U.S. 1 (2014)

Construction repose periods by state

There is no national repose period. The length, the event that starts the clock and the exceptions all change at the state line.

Before the numbers, three complications that decide how many dates a single project generates. Florida ties its clock to documents issued by the authority having jurisdiction, and treats each building in a multi building project as its own improvement. California fixes substantial completion separately for each profession and trade that worked on the improvement. And a New York project has no repose date to anchor to at all. One project does not reliably equal one date.

Clock triggers, where the source states one: substantial completion in California, Texas, Ohio, Georgia, Colorado and Tennessee; completion of the improvement in Pennsylvania; the act or omission in Illinois and New Jersey; recording of the owner's acceptance, or occupancy where acceptance is not recorded, in Louisiana; and in Florida the earliest of a temporary certificate of occupancy, a certificate of occupancy, a certificate of completion, or abandonment. California measures from substantial completion and no later than the earliest of final inspection, a recorded notice of completion, use or occupation, or one year after work stops.

Texas sets 10 years generally, 8 years for most suits by a governmental entity, and 6 years for residential construction where the builder gives a qualifying written warranty, on contracts entered into on or after 9 June 2023.

These statutes move. Florida shortened its period in 2023, Texas added two new ones the same year, and New York has Senate Bill S2146 pending, which would create a construction statute of repose where there is none now. Confirm your state before you set a rule against it.

Sources: Cal. Code Civ. Proc. 337.15 · Tex. Civ. Prac. & Rem. Code 16.009 · Fla. Stat. 95.11 · SDV Fenchurch fifty state survey

Where repose does not end the exposure

Repose statutes carry exceptions, and the exceptions are where records destroyed on schedule cause trouble. One of them changes the number you write down.

Extensions add years to the period. In Texas, damage occurring in the final year of the period gives the claimant two years from accrual to sue, and presenting a written claim during the period extends it by a further two years under the ten-year rule, or one year under the eight-year and residential rules. Several states in the table carry similar provisions. Build the longest extension your state allows into the retention period.

Indemnity and contribution split the states. This is the one that matters most to a general contractor, because it decides whether a repose date protects you from a claim routed through another party. A survey by Woods & Aitken LLP, published in the Journal of the American College of Construction Lawyers and citing decisions through 2012, found twenty-six states applying the construction repose statute to contribution or indemnity claims, four refusing, and twenty-one undecided or split. California and Texas both write indemnity into the statute expressly.

State carve-outs survive the date. California's statute does not apply to actions based on willful misconduct or fraudulent concealment, and its defense is unavailable to a person in actual possession or control where the deficiency causes the injury. Texas excludes wilful misconduct and fraudulent concealment, claims against a person in actual possession or control, and claims under a written warranty with a longer period.

A pending claim overrides the calendar. A suit filed on the last day of the period can run for years. Records relating to a pending claim follow the claim.

Sources: Woods & Aitken, Applicability of statutes of repose to indemnity and contribution claims, with fifty state survey

How to calculate your retention period

Four inputs, in this order.

1. The repose period for the project's state, measured from that state's trigger event. Confirm it against current statute text before you rely on it.

2. The longest extension that state allows, commonly one to two years where the statute provides one.

3. Any contractual requirement that the third party maintain completed operations coverage after completion, because certificates have to be collected across those years too, and the retention clock runs from the last of them.

4. A margin for the statutes moving. Two of the twelve states above changed in a single year.

Run that on the states in your portfolio and the arithmetic is unforgiving in one direction. Pennsylvania's twelve years plus an extension puts you past thirteen; a ten-year state plus two years of extension puts you past twelve. If your work spans several states, a floor set at your longest exposure is the only rule that is simple enough to administer and still covers the project in the state you forgot about. Running a separate clock per project in every state is defensible, and it is a lot of clocks.

For a project in a state with no repose statute, a floor is the only available answer, because a latent defect claim there has no statutory outer date to work back from.

The number itself is your decision, made with your counsel and your records team, and it needs their sign-off rather than a compliance team's. The four inputs above are what that decision needs in front of it.

What belongs in the retained file

Five things, kept together and against the project rather than against the policy year.

1. The certificate, which locates the carrier, the policy number and the policy period.

2. The endorsements collected against it. The certificate records what the producer represented about additional insured status and waiver of subrogation. It does not prove what the policy said, because the form is issued as a matter of information only and confers no rights on the holder. For completed operations that usually means an endorsement written for completed operations, such as the ISO CG 20 37: editions of the CG 20 10 from 1993 onward narrowed the grant to ongoing operations, and the 2001 and later editions cut it off once all work other than service, maintenance or repairs is complete.

3. The policy where one was obtained.

4. The trigger date for the project, with the event it was taken from.

5. The dated results of whatever you confirmed, so that in year eight the file shows what was checked and when.

Two questions about the file that decide whether it survives. Is the compliance platform the system of record or a copy of it, and what happens to the record when you change platforms in year four. A record that only exists inside a vendor you no longer use is the most common way an eight-year file disappears, and it disappears quietly.

Making the rule run

A retention rule tied to repose only works if you capture the right facts at the right time. Four prerequisites.

Record the trigger date at closeout. Substantial completion, the certificate of occupancy, or whatever event the state uses. A repose period with no recorded start date is not a rule.

Retain by project, not by policy year. The retention clock belongs to the project the third party worked on. A subcontractor who worked on six projects in three states has six retention dates, and in California that one project can carry several.

Keep the certificate with its endorsements. Separating them, or keeping only the most recent version, breaks both halves of the record.

Hold for the tail. The period that matters includes the extensions, any pending claim, and any contractual maintenance requirement. Disposal at the end of the period is the other half of the rule, and a litigation hold overrides it.

What this costs is worth being honest about. Capturing a trigger date at closeout means someone owns a field that nobody currently owns, and whoever closes the project has to populate it, not whoever files the certificates. Those are rarely the same person, and the handoff between them is where this fails. Expect to add a step to project closeout and to chase it for the first year.

Where Docutrax fits

Docutrax runs third-party insurance compliance as a managed operation. Licensed property and casualty professionals review certificates, with CRIS-certified Account Managers on construction risk work, and where the contract and the exposure call for it the review goes to endorsements and forensic policy review. The platform keeps the record visible and auditable across all projects, and where a document does not match the requirements the team works with the third party and their brokers and agents to resolve it and documents what was found.

More than 2,000,000 certificates, endorsements and policies have been through that review since 2012, on SOC 2 Type 2 infrastructure.

Decisions about retention, access, work start and payment stay with you.